CloudRCA: A Root Cause Analysis Framework for Cloud Computing Platforms

TL;DR

CloudRCA is a novel framework that leverages multi-source data and hierarchical Bayesian modeling to accurately and efficiently identify root causes of failures in complex cloud computing platforms, improving reliability and reducing troubleshooting time.

Contribution

The paper introduces CloudRCA, a comprehensive root cause analysis framework that integrates heterogeneous data sources with a hierarchical Bayesian network for superior accuracy and scalability in cloud environments.

Findings

Outperforms existing methods in f1-score across platforms

Handles new root cause types due to hierarchical structure

Reduces troubleshooting time by over 20% in practice

Abstract

As business of Alibaba expands across the world among various industries, higher standards are imposed on the service quality and reliability of big data cloud computing platforms which constitute the infrastructure of Alibaba Cloud. However, root cause analysis in these platforms is non-trivial due to the complicated system architecture. In this paper, we propose a root cause analysis framework called CloudRCA which makes use of heterogeneous multi-source data including Key Performance Indicators (KPIs), logs, as well as topology, and extracts important features via state-of-the-art anomaly detection and log analysis techniques. The engineered features are then utilized in a Knowledge-informed Hierarchical Bayesian Network (KHBN) model to infer root causes with high accuracy and efficiency. Ablation study and comprehensive experimental comparisons demonstrate that, compared to existing frameworks, CloudRCA 1) consistently outperforms existing approaches in f1-score across different cloud systems; 2) can handle novel types of root causes thanks to the hierarchical structure of KHBN; 3) performs more robustly with respect to algorithmic configurations; and 4) scales more favorably in the data and feature sizes. Experiments also show that a cross-platform transfer learning mechanism can be adopted to further improve the accuracy by more than 10\%. CloudRCA has been integrated into the diagnosis system of Alibaba Cloud and employed in three typical cloud computing platforms including MaxCompute, Realtime Compute and Hologres. It saves Site Reliability Engineers (SREs) more than $20\%$ in the time spent on resolving failures in the past twelve months and improves service reliability significantly.